Privacy Notice for Square Sellers and Website Visitors

DATED 2024-07-01 · VERSION 20240801_rev01 · COMPARED WITH 20240302_rev01 · ARCHIVE SNAPSHOT

Full text changes — 20240302_rev01 to 20240801_rev01

COLOUR MARKS THE SEVERITY OF A FLAGGED CLAUSE · + AND − MARK ADDED AND REMOVED

 **General**
 ## Privacy Notice for Square Sellers and Website Visitors
+Effective Date: December 21, 2023
+Effective Date: July 1, 2024
 This Privacy Notice describes how your Square entity as indicated below ("Square," "we" and "us") collects, uses, discloses, transfers, stores, retains or otherwise processes your information when you (whether you are a person acting as a sole proprietor or on behalf of another business entity) visit our website [(www.squareup.com)](https://squareup.com/us/en/legal/general/www.squareup.com) or apply or sign up for a Square account (collectively, "Services").
 If you are a consumer shopping at a business that uses Square, please refer instead to the Privacy Notice available [here](https://squareup.com/us/en/legal/general/privacy-no-account). If you are a consumer shopping at a business that uses Square and you provide information to Square in order to receive a digital receipt and email marketing messages, and/or you have signed up to use Square Pay, please refer to the Privacy Notice available [here](https://squareup.com/us/en/legal/general/buyer-features).
+- If your Country of Residence is the United States, your Square entity is Block, Inc., 1455 Market Street, Suite 600, San Francisco, CA 94103, United States.
+- If your Country of Residence is the United States, your Square entity is Block, Inc., 1955 Broadway, Suite 600, Oakland, CA 94612, United States.
 - If your Country of Residence is Canada, your Square entity is Square Canada, Inc. or Square Technologies, Inc.
 - If your Country of Residence is Japan, your Square entity is Square KK.
 - If your Country of Residence is Australia, your Square entity is Square AU PTY, Ltd.
 - To learn more about how Facebook uses your data please visit https://www.facebook.com/help/325807937506242/ or log on to your Facebook account and access your settings. To understand more about Facebook advertising please see here https://www.facebook.com/about/ads.
 - To learn more about BugSnag, please visit https://docs.bugsnag.com/legal/privacy-policy/.
 - To learn more about Crashlytics, please visit https://fabric.io/terms.
+ |
+| Online Tracking and Interest-Based Advertising | Consistent with local law, we and our advertising partners may collect information about your activities on our website. We use this information to advertise to you and to tailor our products and services to your interests. You may see certain ads on other websites because we use third-party services to advertise our services to you. We use these services to target our ads to you and others based on your demographics, interests, and context. These third party ad services track your online activities over time and across multiple websites by collecting your information through automated technologies, including third-party cookies, web server logs, and web beacons. The ad services use this information to show you Square ads that may be tailored to your individual interests. The information our ad services may collect on our behalf includes data about your visits to websites that serve Square ads, such as the pages or ads you view and the actions you take on those websites. This data collection takes place both on our online services, and on third-party websites that serve our ads to you. This process also helps us figure out if our ads to you are effective.
+| Online Tracking and Interest-Based Advertising | While we do not sell personal information as that term is commonly understood, we have, "sold or shared" over the last 12 months Usage Data for the purpose of interest-based advertising (or "targeted advertising") as described below. You can exercise your right to opt-out of targeted advertising by clicking the "Do Not Share My Personal Information" link in the footer of any page on our browser site, or by enabling the Global Privacy Control or a similar opt-out preference setting within the browser you use to access our website.
+To learn about how to opt out of interest-based advertising in the U.S., see "Cookies And Other Similar Technologies" and the "United States" sections below.
+Consistent with local law, we and our advertising partners may collect information about your activities on our website. We use this information to advertise to you and to tailor our products and services to your interests. You may see certain ads on other websites because we use third-party services to advertise our services to you. We use these services to target our ads to you and others based on your demographics, interests, and context. These third party ad services track your online activities over time and across multiple websites by collecting your information through automated technologies, including third-party cookies, web server logs, and web beacons. The ad services use this information to show you Square ads that may be tailored to your individual interests. The information our ad services may collect on our behalf includes data about your visits to websites that serve Square ads, such as the pages or ads you view and the actions you take on those websites. This data collection takes place both on our online services, and on third-party websites that serve our ads to you. This process also helps us figure out if our ads to you are effective.
+To learn about how to opt out of interest-based advertising (sometimes referred to as "targeted advertising") in the U.S., see "Cookies And Other Similar Technologies" and the "United States" sections below.
 To adjust your preferences on interest based advertising in the EU, click on the link on our website to the Cookies Policy which will allow you to adjust your settings preferences.
 Certain web browsers allow you to instruct your browser to respond to Do Not Track ("DNT") signals to website you visit, informing those sites that you do not want your online activities to be tracked. At this time, our websites are not designed to respond to DNT signals or similar mechanisms from browsers.
+ |
+| Partners | We may share minimal personal information (such as your business name) with potential partners who may be able to provide a complementary or related service for your business. We may also share personal information with partners if we believe the disclosure is reasonably necessary to protect us, users of our Services or the public from harm, fraud, or potentially prohibited or illegal activities. |
+| Partners | We may share minimal personal information (such as your business name) with potential partners who may be able to provide a complementary or related service for your business. We may also share personal information with partners if we believe the disclosure is reasonably necessary to protect us, users of our Services or the public from harm, fraud, or potentially prohibited or illegal activities.
+We work with partners who may receive compensation for helping us to identify prospective Sellers interested in Square. If you were referred to Square by one of our referral partners, we may share limited commercial information related to your use of Square, such as the date you activated your account and the volume of transactions you process through Square, to provide reporting on the referral fees earned by the partner that referred you.
+ |
 | Our Affiliates and Group Companies | With other business units (Cash App, Afterpay/Clearpay, and TIDAL) and between wholly-owned subsidiaries of Block, Inc. For example, we may share your information internally to understand how you engage with our company products to help make our Services better for you and for everyone, to help us build Services tailored to your preferences, and to help protect our services and maintain a trusted environment. |
 | **Other third parties who will receive your personal information** | **Why we share data with these parties** |
 | --- | --- |
 | Other users of our Services with whom you interact through your own use of our Services. | To enable you to make or accept a payment, appointment, or money transfer using our Services. |
 | Law enforcement and other public and private agencies | If we believe that disclosure is reasonably necessary (i) to comply with any applicable law, regulation, legal process or governmental request (e.g., from creditors, tax authorities, law enforcement agencies, in response to a garnishment, levy, or lien notice, etc.); (ii) to establish, exercise or defend our legal rights; (iii) to enforce or comply with our \[General Terms\](https://squareup.com/us/en/legal/general/ua) or other applicable agreements or policies; (iv) to protect our or our customers' rights or property, or the security or integrity of our Services; (v) for an investigation of suspected or actual illegal activity; or (vi) to protect us, users of our Services or the public from harm, fraud, or potentially prohibited or illegal activities. |
 | To a subsequent owner, co-owner, or operator of one or more of the Services | To enable them to continue to run the Services after the change of owner or operator. |
 | If we do or try to do a corporate merger, consolidation, or restructuring (including during due diligence and negotiation of these); the sale of substantially all of our stock and/or assets; the financing, acquisition, divestiture, or dissolution of all or a portion of our business; or other corporate change. | To enable the completion of the relevant merger, restructuring, financing, acquisition, divestiture, dissolution or other corporate change. |
 | To others, at your direction | To carry out certain requests you make for us to share data. |
+Although we disclose your personal information to third parties as described above, we do not sell your personal information. We do, however, share your information for purposes of interest-based advertising or "targeted advertising" as discussed in the chart above, as well as below in the "Cookies, Other Similar Technologies, and Advertising" section. You can find more information on how to opt-out of targeted advertising in that section as well as the "Your Choices" section below.
 ## SECURITY
 We do a lot to keep your data safe. While we think we have strong defenses in place, no one can ever guarantee that hackers won't be able to break into our sites or steal your data while it is stored or flowing from you to us or vice versa.
 We take reasonable measures, including administrative, technical, and physical safeguards, to protect your information from loss, theft, and misuse, and unauthorized access, disclosure, alteration, and destruction. Nevertheless, the internet is not a 100% secure environment, and we cannot guarantee absolute security of the transmission or storage of your information. We hold information about you both at our own premises and with the assistance of third-party service providers. Your personal information will be accessible by our employees, contractors and service providers who require access for the purposes described in this Privacy Notice.
 - Access to your personal information in a portable format, including: (1) the categories of personal information described above that we have collected about you and the categories of sources from which we collected such personal information; (2) the business or commercial purposes for collecting or sharing such personal information; (3) the categories of personal information about you that we have disclosed to third parties for a business purpose; (4) the categories of third parties to whom we have disclosed such personal information; and (5) the specific pieces of personal information we have collected about you.
 - Deletion of the personal information we have collected from you;
 - Correction of the personal information we have collected about you;
 - To opt-out of the sharing of your personal information for purposes of targeted advertising.
+You may submit an access, deletion, or correction request by emailing us at privacy@squareup.com or by calling us at 1.844.213.7377. Once we receive your request, we will verify it by requesting that you confirm certain personal information associated with your account. You may also be entitled to submit a request through an authorized agent. You may also email us privacy@squareup.com to appeal our denial of any of your access, deletion, or correction requests.
+You may submit an access, deletion, or correction request through our dedicated online portal at [privacy.block.xyz](https://privacy.block.xyz/) (for Sellers: click the Square logo and then select "Business owner" on the "What type of data are you looking to manage?" page; for Buyers: click the Square logo and then select "Customer") or by calling us at 1.844.213.7377. Once we receive your request, we will verify it by requesting that you confirm certain personal information associated with your account. You may also be entitled to submit a request through an authorized agent. You may also message us through [privacy.block.xyz](https://privacy.block.xyz/) (click on the Square logo and then select "Other" on the "What type of data are you looking to manage?" page) to appeal our denial of any of your access, deletion, or correction requests.
 You can exercise your right to opt-out of targeted advertising by clicking the "Opt Out of Interest-Based Advertising" link in the footer of any page on our browser site.
 Although some of the information we collect and process about you may be considered sensitive personal information, we only process such information for purposes authorized by law, such as to provide services you request from us or to verify your information.
 ##### Deactivating Your Account
 ###### **California**
 Privacy laws that apply in certain places, like California, treat "businesses" and "service providers" differently. Under those laws, a business is the company that decides why and how to process personal information. A service provider processes personal information on behalf of a business in order to provide services. When Square processes Your Customers' Data, we generally act as your service provider. In select cases, however, we may act as a business when we process Your Customers' Data. For example, we act as a business when we use Your Customers' Data to send your customers digital receipts directly from Square, or when we allow you to use Customer Directory or Square Marketing to contact your buyer using a masked email address (for example, j\*\*\*\*\*@gmail.com) that gets routed to them via Square. Your customers can visit the [Privacy Notice for Square Buyer Features](https://squareup.com/us/en/legal/general/buyer-features) for more information on how Square processes their data when it is acting as a business.
 Even though you use our services while acting as an employee, owner, director, officer, or contractor of a company, partnership, sole proprietor of a business, nonprofit, or government agency, if you live in California, California law gives you the right to ask if we disclose your personal information to third parties for their direct marketing purposes (we do not disclose your personal information for others' direct marketing purposes).
+Please see [CCPA Privacy Requests Metrics](https://squareup.com/us/en/legal/general/ccpa-metrics) for details on the number of Access, Deletion, and Do Not Share My Information requests that we received and processed in the last year.
 ## CHANGES TO THIS PRIVACY NOTICE
 We reserve the right to change this Privacy Notice from time to time, as may be required. We will provide you with reasonable prior notice of any material changes in how we use your information, including by email if you have provided one. If you disagree with these changes, you may cancel your account at any time. Any amendments will be published by posting a revised version of the Privacy Notice and updating the "Effective Date" above. The revised version will be effective on the "Effective Date" listed.
 If you have any questions or concerns regarding this Privacy Notice, please reach out to us by contacting your country specific privacy contact below:
+<table><tbody><tr><td>United States</td><td>Block, Inc.<p>1955 Broadway, Suite 600, Oakland, CA 94612, U.S.A</p><p>privacy@squareup.com</p></td><td></td></tr><tr><td>European Union &amp; the United Kingdom</td><td>FAO: Data Protection Officer<p>Squareup International Ltd.</p><p>Fumbally Square<br>Fumbally Lane<br>Dublin 8, Ireland</p><p>privacy-eu@squareup.com</p></td><td>If your request or concern is not satisfactorily resolved by us, you can contact your local data protection authority (see http://ec.europa.eu/justice/dataprotection/bodies/authorities/index_en.html).</td></tr><tr><td>Canada</td><td>Square Canada, Inc.<p>Square Technologies, Inc.</p><p>5000 Yonge Street,<br>Toronto, ON M2N 7E9, Canada</p><p>privacy@squareup.com</p></td><td>If you are dissatisfied with the results of our investigation or any resulting corrective measures, you may be entitled to make a written submission to the Privacy Commissioner in your jurisdiction or to the Office of the Privacy Commissioner of Canada at the address below:<p>Office of the Privacy Commissioner of Canada</p><p>30 Victoria Street Gatineau, Quebec</p><p>K1A 1H3</p><p>https://www.priv.gc.ca/en</p></td></tr><tr><td>Japan</td><td>Square, K.K.<p>Tri-Seven Roppongi 10F,<br>7-7, Roppongi, Minato-ku,<br>Tokyo, 106-0032, Japan</p><p>Representative Director: Akio Takisaki<br>privacy@squareup.com</p></td><td></td></tr><tr><td>Australia</td><td>Square AU PTY, Ltd.<p>Lv. 8, 376-390 Collins Street,<br>Melbourne, VIC 3000, Australia</p><p>privacy@squareup.com</p></td><td>If you are dissatisfied with our response to your complaint, you may be entitled to make a written submission to the Office of the Australian Information Commissioner, whose contact details are as follows:<p>Office of the Australian Information Commissioner (OAIC)<br>Phone: 1300 363 992<br>Email: enquiries@oaic.gov.au<br>Address: GPO Box 5218 Sydney NSW 2001</p></td></tr></tbody></table>
+<table><tbody><tr><td>United States</td><td>Block, Inc.<p>1955 Broadway, Suite 600, Oakland, CA 94612, U.S.A</p><p>privacy.block.xyz</p></td><td></td></tr><tr><td>European Union &amp; the United Kingdom</td><td>FAO: Data Protection Officer<p>Squareup International Ltd.</p><p>Fumbally Square<br>Fumbally Lane<br>Dublin 8, Ireland</p><p>privacy-eu@squareup.com</p></td><td>If your request or concern is not satisfactorily resolved by us, you can contact your local data protection authority (see http://ec.europa.eu/justice/dataprotection/bodies/authorities/index_en.html).</td></tr><tr><td>Canada</td><td>Square Canada, Inc.<p>Square Technologies, Inc.</p><p>5000 Yonge Street,<br>Toronto, ON M2N 7E9, Canada</p><p>privacy.block.xyz</p></td><td>If you are dissatisfied with the results of our investigation or any resulting corrective measures, you may be entitled to make a written submission to the Privacy Commissioner in your jurisdiction or to the Office of the Privacy Commissioner of Canada at the address below:<p>Office of the Privacy Commissioner of Canada</p><p>30 Victoria Street Gatineau, Quebec</p><p>K1A 1H3</p><p>https://www.priv.gc.ca/en</p></td></tr><tr><td>Japan</td><td>Square, K.K.<p>Tri-Seven Roppongi 10F,<br>7-7, Roppongi, Minato-ku,<br>Tokyo, 106-0032, Japan</p><p>Representative Director: Akio Takisaki<br>privacy.block.xyz</p></td><td></td></tr><tr><td>Australia</td><td>Square AU PTY, Ltd.<p>Lv. 8, 376-390 Collins Street,<br>Melbourne, VIC 3000, Australia</p><p>privacy.block.xyz</p></td><td>If you are dissatisfied with our response to your complaint, you may be entitled to make a written submission to the Office of the Australian Information Commissioner, whose contact details are as follows:<p>Office of the Australian Information Commissioner (OAIC)<br>Phone: 1300 363 992<br>Email: enquiries@oaic.gov.au<br>Address: GPO Box 5218 Sydney NSW 2001</p></td></tr></tbody></table>